Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5eYKMxhkwQBF_uf0A2eiXlIwqOQ.roa
File:                     5eYKMxhkwQBF_uf0A2eiXlIwqOQ.roa (raw, json)
Hash identifier:          /V81q9fOpMLm4ENpAgHdtcxyUBeotK5yLLDbDVYI3EE=
Subject key identifier:   E5:E6:0A:33:18:64:C1:00:45:FE:E7:F4:03:67:A2:5E:52:30:A8:E4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CE8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5eYKMxhkwQBF_uf0A2eiXlIwqOQ.roa
Signing time:             Wed 29 Sep 2021 02:48:22 +0000
ROA not before:           Wed 29 Sep 2021 02:48:22 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.92.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7400 (0x1ce8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:22 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E5E60A331864C10045FEE7F40367A25E5230A8E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:11:3c:36:c4:9f:92:67:4a:05:13:0c:99:
                    45:ba:06:98:52:0e:57:55:ff:76:9f:38:2d:90:64:
                    17:9d:0d:32:55:f1:c6:d4:cf:9f:76:20:2c:5f:35:
                    42:9f:b9:d0:39:6d:35:2a:58:0e:d2:7c:dc:1a:97:
                    da:f9:7a:95:18:b0:b1:73:de:1c:29:30:1a:ed:b4:
                    c6:76:6e:6c:20:f2:fd:be:f2:e9:23:9e:d4:23:76:
                    fc:58:8b:8b:7d:90:f4:a1:ea:8a:ad:ed:1d:71:ff:
                    a1:aa:7d:5c:58:37:94:d1:41:f2:45:ef:29:30:c6:
                    af:17:4f:c5:4e:05:d6:03:3d:63:4d:45:61:c9:27:
                    c9:e5:62:d5:f0:90:a5:e7:a0:7d:7c:04:b1:8b:bf:
                    90:b4:d8:85:ea:4f:23:6b:7f:ac:82:44:23:c5:64:
                    6f:31:bf:77:7b:61:f6:05:c9:c0:fa:b1:54:2e:95:
                    26:07:65:02:71:ad:3c:b9:e8:47:9b:cb:48:f9:5c:
                    4e:d9:d8:16:0d:13:83:6e:51:af:59:e3:fe:a7:a1:
                    10:6f:fc:6f:99:bc:68:ac:68:2a:25:e0:9f:11:67:
                    3d:cb:14:d7:e6:6a:e5:9b:68:73:1c:35:bb:e9:18:
                    4a:1e:80:46:6e:5a:be:7c:06:9d:20:ae:82:3f:e4:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E6:0A:33:18:64:C1:00:45:FE:E7:F4:03:67:A2:5E:52:30:A8:E4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5eYKMxhkwQBF_uf0A2eiXlIwqOQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:30:bc:7b:40:c2:30:92:bf:7d:50:40:ce:cc:12:6c:22:5a:
         e1:24:5a:ff:fa:d1:5a:83:6e:c5:2b:60:3c:2f:db:4c:88:18:
         ad:1b:d3:02:02:32:24:e5:30:9b:08:35:29:11:7a:d4:55:dd:
         1d:5d:ea:fe:8c:5e:59:57:6d:31:fd:27:bd:0a:2d:aa:6d:dd:
         c3:29:a6:3b:03:63:e6:03:bc:ac:5e:3a:c1:85:d3:e3:7e:95:
         43:2b:23:28:8c:12:2a:87:bc:c5:d1:4b:a1:ce:c0:a6:2d:ed:
         7b:4e:a5:5b:18:d3:01:e9:ba:5b:28:75:d7:43:ff:2e:c4:aa:
         7b:8a:8e:36:e6:e1:6d:a5:36:6d:04:88:25:f2:b5:eb:b6:20:
         44:d3:e4:00:35:b9:c9:81:54:c6:96:bd:46:a3:4c:b6:91:f1:
         76:a4:ff:96:67:70:e1:2d:fd:92:c4:10:10:12:88:fa:fe:b3:
         0d:bf:28:ba:da:1f:92:ce:00:89:78:d3:45:a4:d0:76:46:d0:
         8b:25:b2:e7:7d:f6:25:6a:da:2e:e2:3e:17:d6:f0:70:94:eb:
         77:7c:ed:b5:11:40:ce:8b:c6:34:4b:94:67:47:6d:8e:35:6d:
         36:94:bd:e8:40:7b:61:68:42:b2:80:c1:3f:73:f8:dd:b4:28:
         27:d6:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:21 2023 by rpki-client on console-fra.rpki-client.org